GwBoy 0.91 Beta
(Backdoor.Win32.GWBoy)

by GDUFS

Compressed with ASPack

Released in March 2003

Made in Taiwan

more versions



Client:
port: 80 TCP



Server:
dropped files:
c:\WINNT\system32\gwboy.exe     size: 118.272 bytes 
c:\WINNT\system32\gwboydll.dll  size: 118.272 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 
data: gwboy.exe 

tested on win2000

server icon is visible in system tray

MegaSecurity